It would be more convenient in a lot of situations if this could be done right within the storage account without the cdn.
As with the CDN right now, it would be great to have a one-click certificate deployment process, maybe even using LetsEncrypt? ;-)